4,108 results · Feed
-
Critical max 10.0
Treck TCP/IP Stack (Update A)
Successful exploitation of this vulnerability may allow remote code execution and a denial-of-service condition.
first Dec 18, 2020 -
Medium max 5.8
Eaton EASYsoft (Update A)
Successful exploitation of these vulnerabilities could allow a local attacker to modify or crash the program.
first Jan 7, 2021 -
HighICSA-21-026-01 5 CVEs
Fuji Electric Tellus Lite V-Simulator and V-Server Lite
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
HighICSA-21-021-01 1 CVE
Delta Electronics ISPSoft
Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
-
HighICSA-21-021-02 2 CVEs
Delta Electronics TPEditor
Successful exploitation of these vulnerabilities could allow an attacker to execute code under the privileges of the application.
-
CriticalICSA-21-021-03 4 CVEs
Honeywell OPC UA Tunneller
Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, remotely execute arbitrary code, or crash the device.
-
CriticalICSA-21-019-02 2 CVEs
Reolink P2P Cameras
Successful exploitation of these vulnerabilities could permit unauthorized access to sensitive information.
-
Medium max 6.5ICSMA-21-019-01 1 CVE
Philips Interventional Workstations
Successful exploitation of this vulnerability makes it possible for someone within the hospital network to remotely shut down or restart the workstation. In the event the workstation is remotely shut down, physicians are still able to use diagnostic imaging f…
-
Highfirst Jan 12, 2021
-
HighICSMA-21-012-01 9 CVEs
SOOIL Dana Diabecare RS Products
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, modify therapy settings, bypass authentication, or crash the device being accessed. These vulnerabilities could affect patient safety.
-
Critical max 9.1ICSA-21-007-01 1 CVE
Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer
Successful exploitation of this vulnerability could allow an attacker remote access to the device without authentication.
-
High
-
HighICSA-21-007-04 4 CVEs
Delta Electronics CNCSoft-B
Successful exploitation of these vulnerabilities could lead to arbitrary code execution.
-
MediumICSMA-21-007-01 2 CVEs
Innokas Yhtymä Oy Vital Signs Monitor
Successful exploitation of these vulnerabilities could allow an attacker to modify communications between downstream devices or cause some features of the affected devices to become disabled.
-
High
Yokogawa CENTUM (Update A)
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to send tampered communication packets or create/overwrite any file and run any commands.
first Aug 11, 2020 -
High max 7.1
Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A)
Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to delete arbitrary files on the system or render the system unusable through a denial-of-service attack.
first Oct 8, 2020 -
Critical max 9.8
ARC Informatique PcVue (Update A)
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, expose sensitive data, and prevent legitimate users from connecting to PcVue services.
first Nov 3, 2020 -
Critical
PTC Kepware KEPServerEX (Update A)
Successful exploitation of these vulnerabilities could lead to a server crashing, a denial-of-service condition, data leakage, or remote code execution.
first Dec 17, 2020 -
Medium max 6.3ICSA-21-005-01 3 CVEs
Schneider Electric Web Server on Modicon M340
Successful exploitation of these vulnerabilities may allow write access and the execution of commands, which could result in data corruption or a web server crash.
-
HighICSA-21-005-02 1 CVE
Panasonic FPWIN Pro
Successful exploitation of this vulnerability could result in an out-of-bounds read, which may allow remote code execution.
-
Critical max 9.8ICSA-21-005-03 2 CVEs
GE Reason RT43X Clocks
Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary code on the system or intercept and decrypt encrypted traffic.
-
High max 7.5ICSA-21-005-04 3 CVEs
Red Lion Crimson 3.1
Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service condition, read and modify the database, and leak memory data.
-
HighICSA-21-005-05 2 CVEs
Delta Electronics DOPSoft
Successful exploitation of these vulnerabilities could allow arbitrary code execution.
-
HighICSA-21-005-06 1 CVE
Delta Electronics CNCSoft ScreenEditor
Successful exploitation of this vulnerability may allow arbitrary code execution.
-
HighICSA-20-352-01 1 CVE
Emerson Rosemount X-STREAM
Successful exploitation of this vulnerability could allow an attacker through a specially crafted URL to download files and obtain sensitive information.
-
Critical max 9.3ICSA-20-352-03 1 CVE
PTC Kepware LinkMaster
Successful exploitation of this vulnerability could allow a local attacker to globally overwrite the service configuration to execute arbitrary code with NT SYSTEM privileges.
-
High max 7.5
WAGO Series 750-88x and 750-352 (Update A)
Successful exploitation of this vulnerability could allow an attacker to crash the device being accessed using a denial-of-service attack.
first Nov 3, 2020 -
HighICSA-20-345-01 1 CVE
Mitsubishi Electric MELSEC iQ-F Series
Successful exploitation of this vulnerability could cause the device to enter a denial-of-service condition, and a reset of the CPU module is required for recovery.
-
HighICSA-20-345-02 1 CVE
Host Engineering H2-ECOM100 Module
Successful exploitation of this vulnerability could lead to a denial-of-service condition, forcing an operator to manually restart the device.
-
Highfirst Aug 30, 2017
-
High
Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)
first Jun 12, 2018 -
Highfirst May 14, 2019
-
Criticalfirst May 14, 2019
-
Criticalfirst Jun 9, 2020
-
Lowfirst Aug 11, 2020
-
Medium max 6.5
Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)
Successful exploitation of this vulnerability could result in credential disclosure.
first Sep 8, 2020 -
CriticalICSA-20-343-01 33 CVEs
Multiple Embedded TCP/IP Stacks
Successful exploitation of these vulnerabilities could allow attackers to corrupt memory, put devices into infinite loops, access unauthorized data, and/or poison DNS cache.
-
CriticalICSA-20-343-03 5 CVEs
Schneider Electric Easergy T300
Successful exploitation of this vulnerability could allow an attacker to obtain unauthorized access to the internal product LAN, which could result in exposure of sensitive information, denial of service, and remote code execution when access to a resource fr…
-
High max 9.8ICSA-20-343-04 5 CVEs
Schneider Electric Modicon M221 Programmable Logic Controller
Successful exploitation of these vulnerabilities could allow an attacker to take control over the PLC and gain unauthorized access, which could result in exposure of sensitive information.
-
High